jahanson/nix-config-tn
Archived
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

chore: initial format

Browse source
This commit is contained in:
truxnell 2024-03-18 20:26:02 +11:00
parent dc5bc4aecc
commit c6e6e00b66
28 changed files with 172 additions and 184 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
Taskfile.yaml
View file

@ -28,3 +28,8 @@ tasks:
cmds: cmds:
- task: lint - task: lint
- task: pc-run - task: pc-run
format:
desc: Check project files
cmds:
- nixpkgs-fmt {{.ROOT_DIR}}

13
flake.nix
View file

@ -18,12 +18,13 @@
inputs.nixpkgs.follows = "nixpkgs"; inputs.nixpkgs.follows = "nixpkgs";
}; };
}; };
outputs = { outputs =
self, { self
nixpkgs, , nixpkgs
sops-nix, , sops-nix
... , ...
} @ inputs: let } @ inputs:
let
inherit (self) outputs; inherit (self) outputs;
forAllSystems = nixpkgs.lib.genAttrs [ forAllSystems = nixpkgs.lib.genAttrs [
"aarch64-linux" "aarch64-linux"

7
images/iso.nix
View file

@ -1,7 +1,6 @@
{ { config
config, , pkgs
pkgs, , ...
...
}: { }: {
imports = [ imports = [
<nixpkgs/nixos/modules/installer/cd-dvd/installation-cd-minimal.nix> <nixpkgs/nixos/modules/installer/cd-dvd/installation-cd-minimal.nix>

13
images/rpi/flake.nix
View file

@ -1,17 +1,20 @@
{ {
description = "A flake to build a basic NixOS iso"; description = "A flake to build a basic NixOS iso";
inputs.nixos.url = "github:nixos/nixpkgs/nixos-22.11"; inputs.nixos.url = "github:nixos/nixpkgs/nixos-22.11";
outputs = { outputs =
self, { self
nixos, , nixos
,
}: { }: {
nixosConfigurations = let nixosConfigurations =
let
exampleBase = { exampleBase = {
isoImage.squashfsCompression = "gzip -Xcompression-level 1"; isoImage.squashfsCompression = "gzip -Xcompression-level 1";
systemd.services.sshd.wantedBy = nixos.lib.mkForce [ "multi-user.target" ]; systemd.services.sshd.wantedBy = nixos.lib.mkForce [ "multi-user.target" ];
users.users.root.openssh.authorizedKeys.keys = [ "<my ssh key>" ]; users.users.root.openssh.authorizedKeys.keys = [ "<my ssh key>" ];
}; };
in { in
{
x86 = nixos.lib.nixosSystem { x86 = nixos.lib.nixosSystem {
system = "x86_64-linux"; system = "x86_64-linux";
modules = [ modules = [

9
nixos/hosts/bootstrap/configuration.nix
View file

@ -1,11 +1,10 @@
# Edit this configuration file to define what should be installed on # Edit this configuration file to define what should be installed on
# your system. Help is available in the configuration.nix(5) man page, on # your system. Help is available in the configuration.nix(5) man page, on
# https://search.nixos.org/options and in the NixOS manual (`nixos-help`). # https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
{ { config
config, , lib
lib, , pkgs
pkgs, , ...
...
}: { }: {
imports = [ imports = [
# Host-specific # Host-specific

13
nixos/hosts/common/nixos/auto-upgrade.nix
View file

@ -1,13 +1,14 @@
{ { config
config, , inputs
inputs, , ...
... }:
}: let let
inherit (config.networking) hostName; inherit (config.networking) hostName;
# Only enable auto upgrade if current config came from a clean tree # Only enable auto upgrade if current config came from a clean tree
# This avoids accidental auto-upgrades when working locally. # This avoids accidental auto-upgrades when working locally.
isClean = inputs.self ? rev; isClean = inputs.self ? rev;
in { in
{
system.autoUpgrade = { system.autoUpgrade = {
enable = isClean; enable = isClean;
dates = "hourly"; dates = "hourly";

11
nixos/hosts/common/nixos/default.nix
View file

@ -1,9 +1,8 @@
{ { inputs
inputs, , outputs
outputs, , config
config, , sops-nix
sops-nix, , ...
...
}: { }: {
imports = imports =
[ [

7
nixos/hosts/common/nixos/nix.nix
View file

@ -1,7 +1,6 @@
{ { inputs
inputs, , lib
lib, , ...
...
}: { }: {
nix = { nix = {
settings = { settings = {

15
nixos/hosts/common/nixos/openssh.nix
View file

@ -1,12 +1,13 @@
{ { outputs
outputs, , lib
lib, , config
config, , ...
... }:
}: let let
inherit (config.networking) hostName; inherit (config.networking) hostName;
hosts = outputs.nixosConfigurations; hosts = outputs.nixosConfigurations;
in { in
{
services.openssh = { services.openssh = {
enable = true; enable = true;
settings = { settings = {

9
nixos/hosts/common/nixos/packages.nix
View file

@ -1,8 +1,7 @@
{ { config
config, , pkgs
pkgs, , lib
lib, , ...
...
}: { }: {
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
bat bat

13
nixos/hosts/common/nixos/users/truxnell/default.nix
View file

@ -1,10 +1,11 @@
{ { pkgs
pkgs, , config
config, , ...
... }:
}: let let
ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups; ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups;
in { in
{
users.users.truxnell = { users.users.truxnell = {
isNormalUser = true; isNormalUser = true;
shell = pkgs.fish; shell = pkgs.fish;

9
nixos/hosts/common/optional/chrony.nix
View file

@ -1,8 +1,7 @@
{ { inputs
inputs, , outputs
outputs, , config
config, , ...
...
}: { }: {
# Time # Time
networking.timeServers = [ "10.8.10.1" ]; networking.timeServers = [ "10.8.10.1" ];

7
nixos/hosts/common/optional/cloudflare-dyndns.nix
View file

@ -1,7 +1,6 @@
{ { config
config, , lib
lib, , ...
...
}: { }: {
# Current nixpkgs cf-ddns only supports using a env file for the apitoken # Current nixpkgs cf-ddns only supports using a env file for the apitoken
# but not for domains, which makes them hard to find. # but not for domains, which makes them hard to find.

11
nixos/hosts/common/optional/dnscrypt-proxy2.nix
View file

@ -1,10 +1,9 @@
# Ref: https://nixos.wiki/wiki/Encrypted_DNS#dnscrypt-proxy2 # Ref: https://nixos.wiki/wiki/Encrypted_DNS#dnscrypt-proxy2
{ { inputs
inputs, , outputs
outputs, , pkgs
pkgs, , config
config, , ...
...
}: { }: {
# Disable resolvd to ensure it doesnt re-write /etc/resolv.conf # Disable resolvd to ensure it doesnt re-write /etc/resolv.conf
config.services.resolved.enable = false; config.services.resolved.enable = false;

6
nixos/hosts/common/optional/editors/vscode/extensions.nix
View file

@ -1,7 +1,9 @@
# Warning, this file is autogenerated by nix4vscode. Don't modify this manually. # Warning, this file is autogenerated by nix4vscode. Don't modify this manually.
{pkgs}: let { pkgs }:
let
vscode-utils = pkgs.vscode-utils; vscode-utils = pkgs.vscode-utils;
in { in
{
"ms-python"."python" = vscode-utils.extensionFromVscodeMarketplace { "ms-python"."python" = vscode-utils.extensionFromVscodeMarketplace {
name = "python"; name = "python";
publisher = "ms-python"; publisher = "ms-python";

9
nixos/hosts/common/optional/firefox.nix
View file

@ -1,8 +1,7 @@
{ { config
config, , pkgs
pkgs, , lib
lib, , ...
...
}: { }: {
programs.firefox = { programs.firefox = {
enable = true; enable = true;

9
nixos/hosts/common/optional/gnome.nix
View file

@ -1,8 +1,7 @@
{ { config
config, , pkgs
pkgs, , lib
lib, , ...
...
}: { }: {
# Ref: https://nixos.wiki/wiki/GNOME # Ref: https://nixos.wiki/wiki/GNOME

9
nixos/hosts/common/optional/maddy.nix
View file

@ -1,8 +1,7 @@
{ { inputs
inputs, , outputs
outputs, , config
config, , ...
...
}: { }: {
# init secret # init secret
config.sops.secrets."system/mail/maddy/envFile" = { config.sops.secrets."system/mail/maddy/envFile" = {

9
nixos/hosts/common/optional/monitoring.nix
View file

@ -1,8 +1,7 @@
{ { config
config, , pkgs
pkgs, , lib
lib, , ...
...
}: { }: {
services.prometheus.exporters = { services.prometheus.exporters = {
node = { node = {

7
nixos/hosts/common/optional/reboot-required.nix
View file

@ -1,7 +1,6 @@
{ { config
config, , pkgs
pkgs, , ...
...
}: { }: {
systemd.timers."reboot-required-check" = { systemd.timers."reboot-required-check" = {
wantedBy = [ "timers.target" ]; wantedBy = [ "timers.target" ];

9
nixos/hosts/common/optional/sops-nix.nix
View file

@ -1,8 +1,7 @@
{ { inputs
inputs, , outputs
outputs, , config
config, , ...
...
}: { }: {
# SOPS settings # SOPS settings
# https://github.com/Mic92/sops-nix # https://github.com/Mic92/sops-nix

9
nixos/hosts/nixosvm/default.nix
View file

@ -1,11 +1,10 @@
# Edit this configuration file to define what should be installed on # Edit this configuration file to define what should be installed on
# your system. Help is available in the configuration.nix(5) man page, on # your system. Help is available in the configuration.nix(5) man page, on
# https://search.nixos.org/options and in the NixOS manual (`nixos-help`). # https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
{ { config
config, , lib
lib, , pkgs
pkgs, , ...
...
}: { }: {
imports = [ imports = [
# Host-specific # Host-specific

11
nixos/hosts/nixosvm/hardware-configuration.nix
View file

@ -1,12 +1,11 @@
# Do not modify this file! It was generated by ‘nixos-generate-config’ # Do not modify this file! It was generated by ‘nixos-generate-config’
# and may be overwritten by future invocations. Please make changes # and may be overwritten by future invocations. Please make changes
# to /etc/nixos/configuration.nix instead. # to /etc/nixos/configuration.nix instead.
{ { config
config, , lib
lib, , pkgs
pkgs, , modulesPath
modulesPath, , ...
...
}: { }: {
imports = [ ]; imports = [ ];

7
nixos/hosts/playground/default.nix
View file

@ -1,7 +1,6 @@
{ { config
config, , lib
lib, , ...
...
}: { }: {
imports = [ ./playground.nix ]; imports = [ ./playground.nix ];
boot.isContainer = true; boot.isContainer = true;

13
nixos/hosts/playground/playground.nix
View file

@ -1,8 +1,7 @@
{ { config
config, , pkgs
pkgs, , lib
lib, , inputs
inputs, , outputs
outputs, , ...
...
}: { } }: { }

8
nixpkgs.nix
View file

@ -1,8 +0,0 @@
# A nixpkgs instance that is grabbed from the pinned nixpkgs commit in the lock file
# This is useful to avoid using channels when using legacy nix commands
let lock = (builtins.fromJSON (builtins.readFile ./flake.lock)).nodes.nixpkgs.locked;
in
import (fetchTarball {
url = "https://github.com/nixos/nixpkgs/archive/${lock.rev}.tar.gz";
sha256 = lock.narHash;
})